# CVEs published 2011-12-16

59 CVEs were published on December 16, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3834](https://cve.now/CVE-2011-3834.md): Multiple integer overflows in the in\_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI… (no CVSS)
- [CVE-2011-4369](https://cve.now/CVE-2011-4369.md): Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x… (no CVSS)
- [CVE-2011-4857](https://cve.now/CVE-2011-4857.md): Heap-based buffer overflow in the in\_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted… (no CVSS)
- [CVE-2011-4725](https://cve.now/CVE-2011-4725.md): Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 allow remote… (no CVSS)
- [CVE-2011-4726](https://cve.now/CVE-2011-4726.md): Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18… (no CVSS)
- [CVE-2011-4727](https://cve.now/CVE-2011-4727.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 does not properly validate string data that is intended… (no CVSS)
- [CVE-2011-4728](https://cve.now/CVE-2011-4728.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 does not set the secure flag for a cookie in an https… (no CVSS)
- [CVE-2011-4729](https://cve.now/CVE-2011-4729.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie… (no CVSS)
- [CVE-2011-4730](https://cve.now/CVE-2011-4730.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 generates a password form field without disabling the… (no CVSS)
- [CVE-2011-4731](https://cve.now/CVE-2011-4731.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 includes an RFC 1918 IP address within a web page… (no CVSS)
- [CVE-2011-4732](https://cve.now/CVE-2011-4732.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 omits the Content-Type header's charset parameter for… (no CVSS)
- [CVE-2011-4733](https://cve.now/CVE-2011-4733.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 sends incorrect Content-Type headers for certain… (no CVSS)
- [CVE-2011-4734](https://cve.now/CVE-2011-4734.md): Multiple SQL injection vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to… (no CVSS)
- [CVE-2011-4735](https://cve.now/CVE-2011-4735.md): Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote… (no CVSS)
- [CVE-2011-4736](https://cve.now/CVE-2011-4736.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 receives cleartext password input over HTTP, which allows remote… (no CVSS)
- [CVE-2011-4737](https://cve.now/CVE-2011-4737.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a submitted password within an HTTP response body, which… (no CVSS)
- [CVE-2011-4738](https://cve.now/CVE-2011-4738.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly flag in a Set-Cookie header for a… (no CVSS)
- [CVE-2011-4739](https://cve.now/CVE-2011-4739.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form field without disabling the autocomplete… (no CVSS)
- [CVE-2011-4740](https://cve.now/CVE-2011-4740.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates web pages containing external links in response to GET… (no CVSS)
- [CVE-2011-4741](https://cve.now/CVE-2011-4741.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a database connection string within a web page, which allows… (no CVSS)
- [CVE-2011-4742](https://cve.now/CVE-2011-4742.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 has web pages containing e-mail addresses that are not intended for… (no CVSS)
- [CVE-2011-4743](https://cve.now/CVE-2011-4743.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 omits the Content-Type header's charset parameter for certain… (no CVSS)
- [CVE-2011-4744](https://cve.now/CVE-2011-4744.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type headers for certain resources, which… (no CVSS)
- [CVE-2011-4745](https://cve.now/CVE-2011-4745.md): Multiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 allow remote… (no CVSS)
- [CVE-2011-4746](https://cve.now/CVE-2011-4746.md): The billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for… (no CVSS)
- [CVE-2011-4747](https://cve.now/CVE-2011-4747.md): The billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 does not prevent the use of weak ciphers for SSL sessions, which… (no CVSS)
- [CVE-2011-4748](https://cve.now/CVE-2011-4748.md): The billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 has web pages containing e-mail addresses that are not intended for… (no CVSS)
- [CVE-2011-4749](https://cve.now/CVE-2011-4749.md): The billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 generates a password form field without disabling the autocomplete… (no CVSS)
- [CVE-2011-4750](https://cve.now/CVE-2011-4750.md): Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2011-4751](https://cve.now/CVE-2011-4751.md): SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for… (no CVSS)
- [CVE-2011-4752](https://cve.now/CVE-2011-4752.md): SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have… (no CVSS)
- [CVE-2011-4753](https://cve.now/CVE-2011-4753.md): Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2011-4754](https://cve.now/CVE-2011-4754.md): Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject… (no CVSS)
- [CVE-2011-4755](https://cve.now/CVE-2011-4755.md): Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an XML document, which… (no CVSS)
- [CVE-2011-4756](https://cve.now/CVE-2011-4756.md): Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier… (no CVSS)
- [CVE-2011-4757](https://cve.now/CVE-2011-4757.md): Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it… (no CVSS)
- [CVE-2011-4758](https://cve.now/CVE-2011-4758.md): Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive… (no CVSS)
- [CVE-2011-4759](https://cve.now/CVE-2011-4759.md): Parallels Plesk Small Business Panel 10.2.0 generates web pages containing external links in response to GET requests with query strings… (no CVSS)
- [CVE-2011-4760](https://cve.now/CVE-2011-4760.md): Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the… (no CVSS)
- [CVE-2011-4761](https://cve.now/CVE-2011-4761.md): Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow… (no CVSS)
- [CVE-2011-4762](https://cve.now/CVE-2011-4762.md): Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might allow remote attackers… (no CVSS)
- [CVE-2011-4763](https://cve.now/CVE-2011-4763.md): Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow… (no CVSS)
- [CVE-2011-4764](https://cve.now/CVE-2011-4764.md): Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel… (no CVSS)
- [CVE-2011-4765](https://cve.now/CVE-2011-4765.md): The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a… (no CVSS)
- [CVE-2011-4766](https://cve.now/CVE-2011-4766.md): The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attackers to obtain ASP source code… (no CVSS)
- [CVE-2011-4767](https://cve.now/CVE-2011-4767.md): The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that… (no CVSS)
- [CVE-2011-4768](https://cve.now/CVE-2011-4768.md): The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter… (no CVSS)
- [CVE-2011-4776](https://cve.now/CVE-2011-4776.md): Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 allow remote… (no CVSS)
- [CVE-2011-4777](https://cve.now/CVE-2011-4777.md): Cross-site scripting (XSS) vulnerability in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Panel 10.4.4\_build20111103.18… (no CVSS)
- [CVE-2011-4847](https://cve.now/CVE-2011-4847.md): SQL injection vulnerability in the Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 allows remote attackers to execute… (no CVSS)
- [CVE-2011-4848](https://cve.now/CVE-2011-4848.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 includes a submitted password within an HTTP response body, which… (no CVSS)
- [CVE-2011-4849](https://cve.now/CVE-2011-4849.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 does not set the secure flag for a cookie in an https session, which… (no CVSS)
- [CVE-2011-4850](https://cve.now/CVE-2011-4850.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie… (no CVSS)
- [CVE-2011-4851](https://cve.now/CVE-2011-4851.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 generates a password form field without disabling the autocomplete… (no CVSS)
- [CVE-2011-4852](https://cve.now/CVE-2011-4852.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 generates web pages containing external links in response to GET… (no CVSS)
- [CVE-2011-4853](https://cve.now/CVE-2011-4853.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 includes an RFC 1918 IP address within a web page, which allows remote… (no CVSS)
- [CVE-2011-4854](https://cve.now/CVE-2011-4854.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding… (no CVSS)
- [CVE-2011-4855](https://cve.now/CVE-2011-4855.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 omits the Content-Type header's charset parameter for certain… (no CVSS)
- [CVE-2011-4856](https://cve.now/CVE-2011-4856.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 sends incorrect Content-Type headers for certain resources, which might… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-12-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.